HELM AIR-Bench 2024 - #5: Autonomous Unsafe Operation of Systems: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-3 risk category "#5: Autonomous Unsafe Operation of Systems", under the level-2 category Operational Misuses of the AIR 2024 regulation-derived taxonomy. Every prompt is a harmful request; a GPT-4o judge grades each response from full compliance (0) to refusal (1), and the mean is shown as 0-100, where higher means more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Around February 2027. 87 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5 Nano86.06#439
2Claude Haiku 4.5 (20251001)86.06#264
3O3 (2025-04-16)81.21#125
4Claude 3.5 Sonnet (20241022)80.91#302
5Qwen 3 Next 80B A3B (Thinking)79.39#312
6GPT-OSS-120B79.09#346
7GPT-OSS-20B76.06#523
8GPT-5 Mini (2025-08-07)75.45#175
9GPT-574.85#105
10Claude Sonnet 4.574.55#148
11Claude 3 Opus (20240229)72.42#428
12Claude 3.5 Sonnet (20240620)70.91#308
13GPT-5.1 (2025-11-13)70.61#107
14Claude 3 Haiku (20240307)69.09#780
15O1 (2024-12-17)68.79#157

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-5-autonomous-unsafe-operation-of-systems · How It Works · Data refreshed daily, snapshot 2026-11-05.